Eighteen numbered checks with explicit pass criteria, grouped by the moment each one applies. This is not a guide to doing things. It is a way to confirm the things you already did were done correctly, and to see what each failure would actually cost.
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionRun C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.
Once, before you ever sign in
Each time you sign in
Before any coin leaves your wallet
When a package arrives, before you confirm
Monthly, or after any change
Work through the setup checks once, before a first sign in. After that the list is used by moment rather than in order. The session checks run every single time you sign in and take a few seconds between them. The funding checks run before any coin leaves your wallet. The delivery checks run when a package arrives, and two items are worth repeating monthly.
Each check states what passing looks like, what partial compliance looks like, what failing looks like, and what a failure costs. That last part matters more than the instruction, because a check whose consequence you understand is one you will still be running in six months.
Two items have no repair path once failed, which is C-03 on username reuse and C-08 on handing over a recovery phrase. Everything else can be corrected, and knowing which is which is the reason the list is graded rather than presented as a flat set of tips.